Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5g3nHE4s4AyxLM1EjkjN1tzc2oMoi5Y9X4mKUgdnVT9c/0/34352e3136342e3132382e302f32322d3232203d3e20323638363136.roa
File:                     34352e3136342e3132382e302f32322d3232203d3e20323638363136.roa (raw, json)
Hash identifier:          XPgHCK1bDN6HEnr8I7cdmW6mcD19tOU7REya85GDuQk=
Subject key identifier:   06:E9:69:CF:83:6E:21:D0:2D:1B:87:47:D0:6B:F0:FA:F3:E9:8A:53
Certificate issuer:       /CN=7FB36BC72BD2ACF8CC6BD5B54BDF564E36834B9B
Certificate serial:       384E505C6BDE41403B6476E87DEC97C68ECB3092
Authority key identifier: 7F:B3:6B:C7:2B:D2:AC:F8:CC:6B:D5:B5:4B:DF:56:4E:36:83:4B:9B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7FB36BC72BD2ACF8CC6BD5B54BDF564E36834B9B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5g3nHE4s4AyxLM1EjkjN1tzc2oMoi5Y9X4mKUgdnVT9c/0/34352e3136342e3132382e302f32322d3232203d3e20323638363136.roa
Signing time:             Tue 07 Apr 2026 13:45:12 +0000
ROA not before:           Tue 07 Apr 2026 13:40:12 +0000
ROA not after:            Tue 06 Apr 2027 13:45:12 +0000
asID:                     268616
IP address blocks:        45.164.128.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5g3nHE4s4AyxLM1EjkjN1tzc2oMoi5Y9X4mKUgdnVT9c/0/7FB36BC72BD2ACF8CC6BD5B54BDF564E36834B9B.crl
                          rsync://rpki-repo.registro.br/repo/5g3nHE4s4AyxLM1EjkjN1tzc2oMoi5Y9X4mKUgdnVT9c/0/7FB36BC72BD2ACF8CC6BD5B54BDF564E36834B9B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7FB36BC72BD2ACF8CC6BD5B54BDF564E36834B9B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 04:12:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:4e:50:5c:6b:de:41:40:3b:64:76:e8:7d:ec:97:c6:8e:cb:30:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7FB36BC72BD2ACF8CC6BD5B54BDF564E36834B9B
        Validity
            Not Before: Apr  7 13:40:12 2026 GMT
            Not After : Apr  6 13:45:12 2027 GMT
        Subject: CN=06E969CF836E21D02D1B8747D06BF0FAF3E98A53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a5:34:c3:96:62:2e:3c:e7:f4:ad:e4:67:1e:
                    c7:fb:24:e9:aa:85:a8:67:7f:da:75:1d:56:f3:f4:
                    85:ba:e5:e4:a8:14:9f:14:a2:77:8f:73:3a:ac:92:
                    de:13:37:38:8c:16:cf:b7:95:ea:ff:e9:ee:b7:13:
                    ba:d2:7f:39:48:b1:6c:6a:19:4e:da:c8:09:1b:f5:
                    2d:5b:97:3b:1b:98:1b:14:b5:8e:f0:91:2e:ad:ae:
                    03:be:a4:25:1e:17:0b:12:06:41:4c:6a:d9:fc:4c:
                    9e:88:c2:75:de:71:83:d2:7d:6f:9d:70:67:05:a2:
                    c2:88:97:1b:b1:b8:6a:cf:19:aa:6b:e6:cc:cd:fe:
                    85:d8:fa:b1:75:d5:18:ea:eb:08:0a:31:de:04:00:
                    37:21:86:28:bf:ad:8a:d6:cf:cc:ec:bc:fc:ab:86:
                    3d:ac:8d:0c:ec:85:7a:c9:e9:20:4c:e6:2d:fe:66:
                    85:72:e6:de:9c:b3:b7:c9:8f:c6:b2:f2:28:7f:ec:
                    44:a6:2a:b3:76:24:f6:7b:17:15:43:d0:8d:d2:75:
                    37:49:74:bc:b0:e4:17:83:30:89:c6:f7:83:6d:66:
                    17:63:ca:2e:62:54:dd:a6:a7:27:a9:01:bf:33:3d:
                    1c:fc:07:6d:d5:f6:be:9b:a3:49:96:2b:17:13:22:
                    41:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:E9:69:CF:83:6E:21:D0:2D:1B:87:47:D0:6B:F0:FA:F3:E9:8A:53
            X509v3 Authority Key Identifier:
                keyid:7F:B3:6B:C7:2B:D2:AC:F8:CC:6B:D5:B5:4B:DF:56:4E:36:83:4B:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5g3nHE4s4AyxLM1EjkjN1tzc2oMoi5Y9X4mKUgdnVT9c/0/7FB36BC72BD2ACF8CC6BD5B54BDF564E36834B9B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7FB36BC72BD2ACF8CC6BD5B54BDF564E36834B9B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5g3nHE4s4AyxLM1EjkjN1tzc2oMoi5Y9X4mKUgdnVT9c/0/34352e3136342e3132382e302f32322d3232203d3e20323638363136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         32:72:55:0f:20:77:e6:1e:13:ca:9a:ba:45:87:a8:3a:67:70:
         56:d6:19:16:24:7d:3f:0f:0a:37:c3:f0:d8:90:e3:81:41:40:
         6a:47:ce:e4:63:ee:3a:7b:d5:f8:34:73:65:9f:9c:3d:91:2f:
         07:92:9c:15:0e:1b:cf:6b:ac:bd:14:a5:b3:9e:80:57:d8:f9:
         59:0c:98:e2:7b:94:c8:18:17:76:fe:dd:70:7c:9a:17:5c:9c:
         26:0a:46:5f:48:2b:59:f6:1b:c1:bc:37:2a:2a:ca:ca:35:03:
         5b:d2:ac:02:fe:31:92:e9:3b:7f:3b:c1:b0:a6:15:8c:58:70:
         40:d1:0c:7c:65:45:6f:38:93:7b:2f:7d:22:75:ae:cf:f4:63:
         75:b1:58:c0:4f:05:5a:94:90:11:77:21:83:f6:a8:a9:a9:8a:
         77:ef:f5:0c:47:a5:dd:f1:98:85:56:a3:9d:a6:f2:fa:9e:87:
         83:86:32:56:cd:56:7c:d9:87:97:48:20:5e:e4:9f:df:e5:cf:
         d2:29:51:ae:32:90:cc:04:1f:e4:ec:6f:10:45:20:44:b7:b7:
         ce:b1:8e:38:76:c1:e8:91:5c:7c:12:b1:8f:f3:92:09:1c:f3:
         b7:b2:20:8e:66:fa:42:05:32:03:f1:e6:c9:b5:82:87:c2:dc:
         23:c3:cc:b9
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUOE5QXGveQUA7ZHbofeyXxo7LMJIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0ZCMzZCQzcyQkQyQUNGOENDNkJENUI1NEJERjU2NEUz
NjgzNEI5QjAeFw0yNjA0MDcxMzQwMTJaFw0yNzA0MDYxMzQ1MTJaMDMxMTAvBgNV
BAMTKDA2RTk2OUNGODM2RTIxRDAyRDFCODc0N0QwNkJGMEZBRjNFOThBNTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjpTTDlmIuPOf0reRnHsf7JOmq
hahnf9p1HVbz9IW65eSoFJ8UonePczqskt4TNziMFs+3ler/6e63E7rSfzlIsWxq
GU7ayAkb9S1blzsbmBsUtY7wkS6trgO+pCUeFwsSBkFMatn8TJ6IwnXecYPSfW+d
cGcFosKIlxuxuGrPGapr5szN/oXY+rF11Rjq6wgKMd4EADchhii/rYrWz8zsvPyr
hj2sjQzshXrJ6SBM5i3+ZoVy5t6cs7fJj8ay8ih/7ESmKrN2JPZ7FxVD0I3SdTdJ
dLyw5BeDMInG94NtZhdjyi5iVN2mpyepAb8zPRz8B23V9r6bo0mWKxcTIkFbAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUBulpz4NuIdAtG4dH0Gvw+vPpilMwHwYDVR0j
BBgwFoAUf7NrxyvSrPjMa9W1S99WTjaDS5swDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNWczbkhFNHM0QXl4TE0xRWprak4xdHpjMm9Nb2k1WTlYNG1LVWdkblZU
OWMvMC83RkIzNkJDNzJCRDJBQ0Y4Q0M2QkQ1QjU0QkRGNTY0RTM2ODM0QjlCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdGQjM2QkM3MkJEMkFDRjhD
QzZCRDVCNTRCREY1NjRFMzY4MzRCOUIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVnM25IRTRzNEF5eExNMUVqa2pOMXR6YzJvTW9pNVk5WDRtS1VnZG5WVDljLzAv
MzQzNTJlMzEzNjM0MmUzMTMyMzgyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzgzNjMxMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAItpIAwDQYJKoZIhvcNAQELBQADggEBADJyVQ8g
d+YeE8qaukWHqDpncFbWGRYkfT8PCjfD8NiQ44FBQGpHzuRj7jp71fg0c2WfnD2R
LweSnBUOG89rrL0UpbOegFfY+VkMmOJ7lMgYF3b+3XB8mhdcnCYKRl9IK1n2G8G8
Nyoqyso1A1vSrAL+MZLpO387wbCmFYxYcEDRDHxlRW84k3svfSJ1rs/0Y3WxWMBP
BVqUkBF3IYP2qKmpinfv9QxHpd3xmIVWo52m8vqeh4OGMlbNVnzZh5dIIF7kn9/l
z9IpUa4ykMwEH+TsbxBFIES3t86xjjh2weiRXHwSsY/zkgkc87eyII5m+kIFMgPx
5sm1gofC3CPDzLk=
-----END CERTIFICATE-----
Generated at Thu Apr 9 19:11:52 2026 by rpki-client